Infinite Loop Vulnerability in GNU Libextractor Product by GNU
CVE-2018-14347

6.5MEDIUM

Key Information:

Vendor

Debian
Status
Debian Linux
Vendor
CVE Published:
17 July 2018

What is CVE-2018-14347?

GNU Libextractor, prior to version 1.7, is susceptible to an infinite loop vulnerability found in the EXTRACTOR_mpeg_extract_method function within mpeg_extractor.c. This flaw can lead to denial of service, impacting the performance and availability of applications relying on the library. Users are advised to upgrade to the latest version to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.debian.org/security/2018/dsa-4290
vendor-advisoryx_refsource_DEBIAN
https://gnunet.org/bugs/view.php?id=5399
x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2018/08/msg0...
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.